| popsstr.com/track/click/zrR0bOw0iutNfVRRhI0atzAjqj9Vs92rbEUVKw2jGxe1dgVAlrgcyEvIrwoSBdr4uo-aq3Yt3SPX7SktVaxteTXkbDo9rd-RBKd7HbAb1Aw0f6fh069MgLS89T8O_7rT71ff2bHUD_B3hjr6tT6jCfc9cJlhV-x37-IvIKvlZ5nM1_ZdFCu0Z_e_vr1diWOZ43YQ8AEZyuU6xXEeY-Qgu9B176QE_ZSUvEFBj88amEGATVoKQ771YhWBQA2Pi5S2D0hF_W5i6lvjH1DJOlHY6NsnF5I5QLIQz0OXtj3E7x4t3WdW60pl_r0JMfl_HnrKtUkQzeEnJF9Vm40y5g72Ss7t2S_6UGp7HqKn1MuWmbDKsaelgRlO3uzU_xMMHwsNACBiw2MdZN-_iRBf-6cn_-xBEpT-PScC_5sUSznReC9PVBTV2Au7g9uIBnRSF17C_qpQEpqV2WiEb-oTwhdGyJw4M_472e9GdJrRgmYHYUvydjawjgVq_qlrH0wKaaLJz0SKHpHgqSWQxB4lA1_BQwqX3IFeC2H1J2kQ-ZpGJKJeOTuke2_5pGFejhAteP2ZUvoN7Vi27Nql_eMqFiFgXHCSe256ayQ?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1lhjnxfwm58wsb281tkt9pgsjjaen |  88.99.51.152 | 302 | 0 B |
URL User Request GET HTTP/1.1popsstr.com/track/click/zrR0bOw0iutNfVRRhI0atzAjqj9Vs92rbEUVKw2jGxe1dgVAlrgcyEvIrwoSBdr4uo-aq3Yt3SPX7SktVaxteTXkbDo9rd-RBKd7HbAb1Aw0f6fh069MgLS89T8O_7rT71ff2bHUD_B3hjr6tT6jCfc9cJlhV-x37-IvIKvlZ5nM1_ZdFCu0Z_e_vr1diWOZ43YQ8AEZyuU6xXEeY-Qgu9B176QE_ZSUvEFBj88amEGATVoKQ771YhWBQA2Pi5S2D0hF_W5i6lvjH1DJOlHY6NsnF5I5QLIQz0OXtj3E7x4t3WdW60pl_r0JMfl_HnrKtUkQzeEnJF9Vm40y5g72Ss7t2S_6UGp7HqKn1MuWmbDKsaelgRlO3uzU_xMMHwsNACBiw2MdZN-_iRBf-6cn_-xBEpT-PScC_5sUSznReC9PVBTV2Au7g9uIBnRSF17C_qpQEpqV2WiEb-oTwhdGyJw4M_472e9GdJrRgmYHYUvydjawjgVq_qlrH0wKaaLJz0SKHpHgqSWQxB4lA1_BQwqX3IFeC2H1J2kQ-ZpGJKJeOTuke2_5pGFejhAteP2ZUvoN7Vi27Nql_eMqFiFgXHCSe256ayQ?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1lhjnxfwm58wsb281tkt9pgsjjaen IP88.99.51.152:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectpopsstr.com FingerprintD7:10:4F:52:6A:87:C6:59:B6:4D:BB:32:95:CE:EB:BB:E8:76:8F:42 ValiditySat, 21 Dec 2024 08:11:15 GMT - Fri, 21 Mar 2025 08:11:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /track/click/zrR0bOw0iutNfVRRhI0atzAjqj9Vs92rbEUVKw2jGxe1dgVAlrgcyEvIrwoSBdr4uo-aq3Yt3SPX7SktVaxteTXkbDo9rd-RBKd7HbAb1Aw0f6fh069MgLS89T8O_7rT71ff2bHUD_B3hjr6tT6jCfc9cJlhV-x37-IvIKvlZ5nM1_ZdFCu0Z_e_vr1diWOZ43YQ8AEZyuU6xXEeY-Qgu9B176QE_ZSUvEFBj88amEGATVoKQ771YhWBQA2Pi5S2D0hF_W5i6lvjH1DJOlHY6NsnF5I5QLIQz0OXtj3E7x4t3WdW60pl_r0JMfl_HnrKtUkQzeEnJF9Vm40y5g72Ss7t2S_6UGp7HqKn1MuWmbDKsaelgRlO3uzU_xMMHwsNACBiw2MdZN-_iRBf-6cn_-xBEpT-PScC_5sUSznReC9PVBTV2Au7g9uIBnRSF17C_qpQEpqV2WiEb-oTwhdGyJw4M_472e9GdJrRgmYHYUvydjawjgVq_qlrH0wKaaLJz0SKHpHgqSWQxB4lA1_BQwqX3IFeC2H1J2kQ-ZpGJKJeOTuke2_5pGFejhAteP2ZUvoN7Vi27Nql_eMqFiFgXHCSe256ayQ?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1lhjnxfwm58wsb281tkt9pgsjjaen HTTP/1.1
Host: popsstr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302
location: https://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
content-length: 0
date: Sun, 29 Dec 2024 01:07:04 GMT
|
|
| api-un.unative.com/p/w/cecef939-3587-4e47-a28a-282aaa2c0cee | 162.55.0.219 | 200 | 18 B |
URL GET HTTP/1.1api-un.unative.com/p/w/cecef939-3587-4e47-a28a-282aaa2c0cee IP162.55.0.219:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subjectunative.com Fingerprint87:C0:77:02:B6:27:6D:56:5C:63:03:89:E3:55:37:5B:2A:C0:71:67 ValiditySat, 02 Nov 2024 08:04:48 GMT - Fri, 31 Jan 2025 08:04:47 GMT
File typeASCII text, with no line terminators Hashcc7fd95a87ea3721ce1853bf3c4dd75e 7f687f7881adf0fc407378d375a61b8f198c0912 0f06a4c8d34690d4e42c81f232a5bdfe9fcbde8a54b5ccd0609a313e90da0879
OPTIONS /p/w/cecef939-3587-4e47-a28a-282aaa2c0cee HTTP/1.1
Host: api-un.unative.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,sdk-version
Referer: https://fun4me.click/
Origin: https://fun4me.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
allow: HEAD,GET,OPTIONS
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: content-type,sdk-version,origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
access-control-allow-headers: content-type,sdk-version,origin,accept,content-type,x-requested-with
content-type: text/plain;charset=UTF-8
content-length: 18
date: Sun, 29 Dec 2024 01:07:05 GMT
|
|
| sdk.unative.com/UNativePageSDKES6.js?v=150706 |  185.76.9.12 | 200 OK | 46 kB |
URL GET HTTP/2sdk.unative.com/UNativePageSDKES6.js?v=150706 IP185.76.9.12:443 ASN#60068 Datacamp Limited
Requested byhttps://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subject1058678020.rsc.cdn77.org Fingerprint3C:17:42:78:DB:0C:48:95:C1:7A:C5:87:F2:9C:BD:08:97:D5:8D:A2 ValiditySun, 20 Oct 2024 04:54:03 GMT - Sat, 18 Jan 2025 04:54:02 GMT
File typegzip compressed data, from Unix Hash4964de23e392ac3a9dd741961ed06f62 97114d94f9b0e070ac65d59941e7e19e7966ce2a fcf3e951306ab12ea245fed9de6cf85a1fb7cf8b0ec0115e48404cb37a76e5d3
GET /UNativePageSDKES6.js?v=150706 HTTP/1.1
Host: sdk.unative.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fun4me.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Dec 2024 01:07:04 GMT
content-type: application/x-javascript
last-modified: Thu, 27 Apr 2023 15:05:30 GMT
etag: W/"2c9b3-5fa52affcd6e3"
vary: Accept-Encoding
x-77-nzt: EwwBuUwJCgH3h2UIAAwBuUwKDAH3TWwCAAwBw7WvAgG3CwAAAA
x-77-nzt-ray: e2f754204e4a38d8b8a07067c723d030
x-77-cache: HIT
x-77-age: 550279
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| api-un.unative.com/p/w/cecef939-3587-4e47-a28a-282aaa2c0cee | 162.55.0.219 | 200 | 429 B |
URL GET HTTP/1.1api-un.unative.com/p/w/cecef939-3587-4e47-a28a-282aaa2c0cee IP162.55.0.219:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subjectunative.com Fingerprint87:C0:77:02:B6:27:6D:56:5C:63:03:89:E3:55:37:5B:2A:C0:71:67 ValiditySat, 02 Nov 2024 08:04:48 GMT - Fri, 31 Jan 2025 08:04:47 GMT
Hashaa5bf976f2cec3161a2fd92593ff63cc d064b8b81676a9893437b890c927433415a1fe4e 22b9c3b2a424da9ba78986be4baca36b4334241398812cabc44b71af5d1dd7c1
GET /p/w/cecef939-3587-4e47-a28a-282aaa2c0cee HTTP/1.1
Host: api-un.unative.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fun4me.click/
content-type: application/json;charset=UTF-8
sdk-version: unative/web/150706
Origin: https://fun4me.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
content-type: application/json;charset=UTF-8
content-length: 429
date: Sun, 29 Dec 2024 01:07:05 GMT
|
|
| tr-un.unative.com/track/visit/incognito/cecef939-3587-4e47-a28a-282aaa2c0cee | 49.12.133.31 | 200 | 0 B |
URL GET HTTP/1.1tr-un.unative.com/track/visit/incognito/cecef939-3587-4e47-a28a-282aaa2c0cee IP49.12.133.31:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subjectunative.com Fingerprint87:C0:77:02:B6:27:6D:56:5C:63:03:89:E3:55:37:5B:2A:C0:71:67 ValiditySat, 02 Nov 2024 08:04:48 GMT - Fri, 31 Jan 2025 08:04:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track/visit/incognito/cecef939-3587-4e47-a28a-282aaa2c0cee HTTP/1.1
Host: tr-un.unative.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fun4me.click/
content-type: application/json;charset=UTF-8
sdk-version: unative/web/150706
Origin: https://fun4me.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200
x-responded-by: cors-support-provider
access-control-expose-headers: set-cookie
access-control-allow-origin: *
access-control-request-headers: origin,accept,content-type,x-requested-with
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH
access-control-max-age: 86400
content-length: 0
date: Sun, 29 Dec 2024 01:07:05 GMT
|
|
| fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee |  104.21.48.1 | 200 OK | 10 kB |
URL User Request GET HTTP/2fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee IP104.21.48.1:443
CertificateIssuerGoogle Trust Services Subjectfun4me.click Fingerprint5A:71:69:48:77:02:8A:57:87:A7:50:73:86:6D:0D:32:FF:93:20:A1 ValidityTue, 05 Nov 2024 11:02:47 GMT - Mon, 03 Feb 2025 11:02:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee HTTP/1.1
Host: fun4me.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Dec 2024 01:07:04 GMT
content-type: text/html
last-modified: Mon, 05 Dec 2022 19:58:48 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OTzcCoBcnsSm%2B%2Bs9dyVd00hAJ%2Bd1GFTuKVdpOxRZ3FwHTr7Kiz2KTPsK21AyUUeo9Hx7xRBhV8VP0vRrcLCuO3dVou3sXL9AIsUah6umVDeDqut1p0mCVCMgF5z5%2FgU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f95e41f3d6b1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5857&min_rtt=433&rtt_var=10832&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3200&recv_bytes=1155&delivery_rate=7337837&cwnd=253&unsent_bytes=0&cid=a29a6c564427ed63&ts=80&x=0"
X-Firefox-Spdy: h2
|
|
| fun4me.click/js/pop-sdk.js | 104.21.48.1 | 200 OK | 4.9 kB |
URL GET HTTP/3fun4me.click/js/pop-sdk.js IP104.21.48.1:443
Requested byhttps://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerGoogle Trust Services Subjectfun4me.click Fingerprint5A:71:69:48:77:02:8A:57:87:A7:50:73:86:6D:0D:32:FF:93:20:A1 ValidityTue, 05 Nov 2024 11:02:47 GMT - Mon, 03 Feb 2025 11:02:46 GMT
File typeJavaScript source, ASCII text, with very long lines (5101), with no line terminators Hashe8236450d64b31411e6139ddb4dd27f4 f7ee43aeb3e14c02022855a4fe41f4f91c98c5db 226767881a9da66eca69b0d64e930b810335d28d38f62c6f279480dec0eff772
GET /js/pop-sdk.js HTTP/1.1
Host: fun4me.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 29 Dec 2024 01:07:04 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VYEAzWhkzjkvFnbur344kPd3k6%2BZM%2FjTRaCS3hnXKoZrYClMJf%2B%2BwYuJwqPw1j1yLLkQXAc5PuRxvvXM9dmazbIm8o8%2BkZ2wIEQq%2B6yDz%2F0Tgl64%2B64bSgUxFOzbj8U%3D"}],"group":"cf-nel","max_age":604800}
etag: W/"4899-1670270328000"
last-modified: Mon, 05 Dec 2022 19:58:48 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4203
content-encoding: br
cf-ray: 8f95e4209a3b56b7-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
| sdk.unative.com/UNativeSDK.js | 185.76.9.12 | 200 OK | 17 kB |
URL GET HTTP/2sdk.unative.com/UNativeSDK.js IP185.76.9.12:443 ASN#60068 Datacamp Limited
Requested byhttps://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerLet's Encrypt Subject1058678020.rsc.cdn77.org Fingerprint3C:17:42:78:DB:0C:48:95:C1:7A:C5:87:F2:9C:BD:08:97:D5:8D:A2 ValiditySun, 20 Oct 2024 04:54:03 GMT - Sat, 18 Jan 2025 04:54:02 GMT
File typeJavaScript source, ASCII text, with very long lines (17396), with no line terminators Hash647c17795b88ec6b0432e10ebebbce67 ae012902de61b37343ed3288b65e07a4f94edb31 12f3ffc2bef3ae11d82ec74d1c21eaf9d7ee389d320b85d8fb00b666a6eefa2c
GET /UNativeSDK.js HTTP/1.1
Host: sdk.unative.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fun4me.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 29 Dec 2024 01:07:04 GMT
content-type: application/x-javascript
last-modified: Thu, 27 Apr 2023 15:05:30 GMT
etag: W/"43f4-5fa52affcd6e3"
vary: Accept-Encoding
x-77-nzt: EwwBuUwJCgH3c4YMAAwBuUwKEwH38QIAAAwBJRPCNAG3DIoGAA
x-77-nzt-ray: e2f754204e4a38d8b8a07067e1af0e2e
x-77-cache: HIT
x-77-age: 820851
content-encoding: gzip
server: CDN77-Turbo
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| fun4me.click/favicon.ico | 104.21.48.1 | 200 OK | 6.9 kB |
IP104.21.48.1:443
Requested byhttps://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee CertificateIssuerGoogle Trust Services Subjectfun4me.click Fingerprint5A:71:69:48:77:02:8A:57:87:A7:50:73:86:6D:0D:32:FF:93:20:A1 ValidityTue, 05 Nov 2024 11:02:47 GMT - Mon, 03 Feb 2025 11:02:46 GMT
File typeMS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit gray+alpha, non-interlaced, 32 bits/pixel Hashb58051f458d0cd0fbf58ff901356a6d6 2184af1e9211161e0c4ce7711da6350f049ad8eb 782316ae0ab742418ed75306b7ee0985230e28e27bc5cc88a5e3d4af648729ed
GET /favicon.ico HTTP/1.1
Host: fun4me.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fun4me.click/progress-bar.html?un=cecef939-3587-4e47-a28a-282aaa2c0cee
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 29 Dec 2024 01:07:04 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D92JQNwCgH48MMebFOQg69hgUQNfCRSo5UU8Vfe2BK82htHh8ZWwUmCjfuoYH9l8lP7WEHqLJKqECqkrWYGck%2FnpYQTMzB0pMaGOLCOcGC5Avl8KKcwv3bzQV0ng0Tc%3D"}],"group":"cf-nel","max_age":604800}
etag: W/"6881-1670270328000"
last-modified: Mon, 05 Dec 2022 19:58:48 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1056
content-encoding: br
cf-ray: 8f95e4219a3d56b7-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
|
|
![Share reporttesting](/search?q=http.url.addr:"topushh.com/r4/index.php?p=2&pid=0ddcbbfa-c7b6-4f41-823e-26be8d60d337&sid=12661&tid=1lhjnxfwm58wsb281tkt9pgsjjaen&u=https://popsstr.com/track/click/zrR0bOw0iutNfVRRhI0atzAjqj9Vs92rbEUVKw2jGxe1dgVAlrgcyEvIrwoSBdr4uo-aq3Yt3SPX7SktVaxteTXkbDo9rd-RBKd7HbAb1Aw0f6fh069MgLS89T8O_7rT71ff2bHUD_B3hjr6tT6jCfc9cJlhV-x37-IvIKvlZ5nM1_ZdFCu0Z_e_vr1diWOZ43YQ8AEZyuU6xXEeY-Qgu9B176QE_ZSUvEFBj88amEGATVoKQ771YhWBQA2Pi5S2D0hF_W5i6lvjH1DJOlHY6NsnF5I5QLIQz0OXtj3E7x4t3WdW60pl_r0JMfl_HnrKtUkQzeEnJF9Vm40y5g72Ss7t2S_6UGp7HqKn1MuWmbDKsaelgRlO3uzU_xMMHwsNACBiw2MdZN-_iRBf-6cn_-xBEpT-PScC_5sUSznReC9PVBTV2Au7g9uIBnRSF17C_qpQEpqV2WiEb-oTwhdGyJw4M_472e9GdJrRgmYHYUvydjawjgVq_qlrH0wKaaLJz0SKHpHgqSWQxB4lA1_BQwqX3IFeC2H1J2kQ-ZpGJKJeOTuke2_5pGFejhAteP2ZUvoN7Vi27Nql_eMqFiFgXHCSe256ayQ?ur=https://analytics.ozlinedsp.com/tracking/click.gif?token=1lhjnxfwm58wsb281tkt9pgsjjaen&price=${AUCTION_PRICE}&rurl=https://creatives.altaffiliatesol.com/hentaiheroes/?ref_id=135846&td=ep&tc=91b75fed-e221-4087-b908-2fb4b83bd446&impid=1&exchange_name=ADSY_TECH_ADL_Pop&bid=0.0035&ts=1735434319619&tid=1lhjnxfwm58wsb281tkt9pgsjjaen&imp_url=https://analytics.ozlinedsp.com/tracking/imp.gif?token=1lhjnxfwm58wsb281tkt9pgsjjaen&price=${AUCTION_PRICE}&imp_nurl_url=https://analytics.ozlinedsp.com/tracking/imp?token=1lhjnxfwm58wsb281tkt9pgsjjaen&price=${AUCTION_PRICE}&campaign_id=cb82ff13-16cb-4511-a60d-5d9d59fe3983&campaign=LQ_T2++ADSY_TECH_ADL&creative_id=d90fbdf7-33f0-4cc8-9094-d08b1aacbebb&media_type=SITE&tag_id=&app_name=&app_id=&site=&site_id=12661&placement=&category=&sub_category=&app_bundle=&placement_id=12661&site_url=publisher.com&carrier=-&device_os=windows&os_version=10.0&device=pc&device_id=&device_hwv=&device_make=&device_model=&language=da&platform_ip=&lat=&lon=&country=DNK&cc=®ion=hovedstaden&city=copenhagen&zc=2450&isp=-&ip=85.190.238.147&ua=mozilla/5.0+(windows+nt+10.0;+win64;+x64)+applewebkit/537.36+(khtml,+like+gecko)+chrome/131.0.0.0+safari/537.36&ifa=835fc99d-b6ce-3b90-a288-6444c61c5f72&idfa=835fc99d-b6ce-3b90-a288-6444c61c5f72&gaid="){kind=link}